Professional OPC
Development Tools

logos

Online Forums

Technical support is provided through Support Forums below. Anybody can view them; you need to Register/Login to our site (see links in upper right corner) in order to Post questions. You do not have to be a licensed user of our product.

Please read Rules for forum posts before reporting your issue or asking a question. OPC Labs team is actively monitoring the forums, and replies as soon as possible. Various technical information can also be found in our Knowledge Base. For your convenience, we have also assembled a Frequently Asked Questions page.

Do not use the Contact page for technical issues.

Certificate Errors with Error ID OpcLabs.{56E6B7CF}

More
09 Jul 2025 21:03 #14318 by KPersyn33
Hello!

The current version is 5.82.175.1.

Here is the full exception:

System.AggregateException: 2 error(s) occurred, the first one being: UA SDK error (System.Security.Cryptography.CryptographicException) in 'ApplicationInstance.CheckApplicationInstanceCertificates'. The parameter is incorrect. + The error occurred while creating or checking the application instance certificate for application type: Client. Check event log entries for errors and warnings. + Connection attempt #1; last connected at 1/1/0001 12:00:00 AM (local); unconnected for 00:00:00.0470000. + The client method called (or event/callback invoked) was 'WriteMultiple[1]'. ---> OpcLabs.EasyOpc.UA.Engine.UAEngineException: UA SDK error (System.Security.Cryptography.CryptographicException) in 'ApplicationInstance.CheckApplicationInstanceCertificates'. The parameter is incorrect. + The error occurred while creating or checking the application instance certificate for application type: Client. Check event log entries for errors and warnings. ---> System.Security.Cryptography.CryptographicException: The parameter is incorrect. at System.Security.Cryptography.NCryptNative.ImportKey(SafeNCryptProviderHandle provider, Byte[] keyBlob, String format) at System.Security.Cryptography.CngKey.Import(Byte[] keyBlob, String curveName, CngKeyBlobFormat format, CngProvider provider) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.BCryptHandleToNCryptHandle(SafeBCryptKeyHandle bcryptKeyHandle) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.GetECDsaPublicKey(X509Certificate2 certificate) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.CopyWithPrivateKey(X509Certificate2 certificate, ECDsa privateKey) at Opc.Ua.Security.Certificates.CertificateBuilder.CreateForECDsa() at Opc.Ua.Configuration.ApplicationInstance.d__52.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task) at Opc.Ua.Configuration.ApplicationInstance.d__47.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Opc.Ua.Configuration.ApplicationInstance.d__46.MoveNext() --- End of inner exception stack trace --- --- End of inner exception stack trace --- ---> (Inner Exception #0) OpcLabs.EasyOpc.UA.Engine.UAEngineException: UA SDK error (System.Security.Cryptography.CryptographicException) in 'ApplicationInstance.CheckApplicationInstanceCertificates'. The parameter is incorrect. + The error occurred while creating or checking the application instance certificate for application type: Client. Check event log entries for errors and warnings. ---> System.Security.Cryptography.CryptographicException: The parameter is incorrect. at System.Security.Cryptography.NCryptNative.ImportKey(SafeNCryptProviderHandle provider, Byte[] keyBlob, String format) at System.Security.Cryptography.CngKey.Import(Byte[] keyBlob, String curveName, CngKeyBlobFormat format, CngProvider provider) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.BCryptHandleToNCryptHandle(SafeBCryptKeyHandle bcryptKeyHandle) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.GetECDsaPublicKey(X509Certificate2 certificate) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.CopyWithPrivateKey(X509Certificate2 certificate, ECDsa privateKey) at Opc.Ua.Security.Certificates.CertificateBuilder.CreateForECDsa() at Opc.Ua.Configuration.ApplicationInstance.d__52.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task) at Opc.Ua.Configuration.ApplicationInstance.d__47.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Opc.Ua.Configuration.ApplicationInstance.d__46.MoveNext() --- End of inner exception stack trace ---<--- ---> (Inner Exception #1) OpcLabs.EasyOpc.UA.Engine.UAEngineException: UA SDK error (System.Security.Cryptography.CryptographicException) in 'ApplicationInstance.CheckApplicationInstanceCertificates'. The parameter is incorrect. + The error occurred while creating or checking the application instance certificate for application type: Client. Check event log entries for errors and warnings. ---> System.Security.Cryptography.CryptographicException: The parameter is incorrect. at System.Security.Cryptography.NCryptNative.ImportKey(SafeNCryptProviderHandle provider, Byte[] keyBlob, String format) at System.Security.Cryptography.CngKey.Import(Byte[] keyBlob, String curveName, CngKeyBlobFormat format, CngProvider provider) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.BCryptHandleToNCryptHandle(SafeBCryptKeyHandle bcryptKeyHandle) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.GetECDsaPublicKey(X509Certificate2 certificate) at System.Security.Cryptography.X509Certificates.ECDsaCertificateExtensions.CopyWithPrivateKey(X509Certificate2 certificate, ECDsa privateKey) at Opc.Ua.Security.Certificates.CertificateBuilder.CreateForECDsa() at Opc.Ua.Configuration.ApplicationInstance.d__52.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at System.Runtime.CompilerServices.TaskAwaiter.ValidateEnd(Task task) at Opc.Ua.Configuration.ApplicationInstance.d__47.MoveNext() --- End of stack trace from previous location where exception was thrown --- at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task) at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) at Opc.Ua.Configuration.ApplicationInstance.d__46.MoveNext() --- End of inner exception stack trace ---<--- 

The application does work from our webserver which has the same setup as the VM that gets the above errors.

Please Log in or Create an account to join the conversation.

More
09 Jul 2025 07:03 #14317 by support
Hello.

1. From version 2025.1 onwards, it is normal to see multiple certificates, including when you have one with NistP256 and one with NistP384.

2. Which version/build of the library are you using please

3. For troubleshooting, I need the details of the inner exceptions. If you can debug the program, just break at the where the exception is handled, and inspect the .InnerExceptions property of the AggregateException object inside the "main" UAException - specifically, what are their types, and what are their error messages, etc. ? - post it here. If you cannot use the debugger, put in additional code to obtain and log/output this information.

4. Regarding the article you found - in some cases yes, this can be the reason, but it is a specific case so unless the error messages are like those stated in the article, it would be no surprise that it does not help.

5. What is the scope of the problem? Does it happen on one computer with one piece of software? Or on multiple computers with the same software? Etc.

6. You can try this: Make a backup copy of the certificate stores. Then, remove all certificates for your app, from all of them. And retest.

Best regards

Please Log in or Create an account to join the conversation.

More
08 Jul 2025 19:19 #14316 by KPersyn33
Hello!

We are currently running into a situation where we are getting the following error when we start the service: 
OpcLabs.EasyOpc.UA.OperationModel.UAException: An OPC-UA operation failure with error ID 'OpcLabs.{56E6B7CF}' occurred, originating from '' and with depth of 3. The inner exception, with error Id "OpcLabs.{56E6B7CF}", contains details about the problem. ---> System.AggregateException: 2 error(s) occurred, the first one being: UA SDK error (System.Security.Cryptography.CryptographicException) in 'ApplicationInstance.CheckApplicationInstanceCertificates'.

We found the following kb article and confirmed that the permissions are correctly set. =16pxKB Article

We noticed that the new certificate has [NistP in the name and that there are two with the exact time. Could this be part of the issues we are seeing?

ex:
FioPdcDB04 [NistP256][12314512412412412].der 12:35pm
FioPdcDB04 [NistP384][321511241241412].der 12:35pm

Looking forward to your response!
 
Attachments:

Please Log in or Create an account to join the conversation.

Moderators: supportvaclav.zaloudek
Time to create page: 0.140 seconds